Skip to content
OpenAdvisories

Vendor

SuitePlugins

5 known vulnerabilities.

Products

Video & Photo Gallery for Ultimate Member 4 Login Widget for Ultimate Member 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-22672

    WordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.2 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Server Side Request Forgery.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through <= 1.1.2.

    SuitePlugins Video & Photo Gallery for Ultimate Member
  • Medium 6.1
    CVE-2024-12162

    Video & Photo Gallery for Ultimate Member <= 1.1.1 - Reflected Cross-Site Scripting

    The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it p…

    SuitePlugins Video & Photo Gallery for Ultimate Member Web / CMS